22 matches found
CVE-2026-84135
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84122
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84126
Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84129
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84127
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
EUVD-2026-69090
Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84138 Denial-of-service in the PDF Viewer component
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84135
Firefox Focus for Android is affected by an unspecified issue described only as an "Other issue" in the provided documents. No specific root cause, vulnerable component, or impact is detailed. The vulnerability was fixed in Firefox 155 , per Mozilla security advisory MFSA2026-82 and Bugzilla #204...
EUVD-2026-69083
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84134
CVE-2026-84134 is an unspecified issue in the Profile Backup component of Mozilla Firefox . The root cause is described only as an "other issue," with no further technical detail publicly available. The vulnerability was fixed in Firefox 155 and Firefox ESR 153.2 . No CVSS metrics are assigned, a...
CVE-2026-84130 Information disclosure in the Graphics: WebGPU component
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
EUVD-2026-69078
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84128 Privilege escalation in the WebDriver BiDi component
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84128
CVE-2026-84128 is a privilege escalation vulnerability in the WebDriver BiDi component of Firefox , fixed in Firefox 155 . The bug is tracked in Mozilla Bugzilla #2044280 and disclosed via MFSA2026-82 . The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, no privileges r...
CVE-2026-84127
CVE-2026-84127 is an information disclosure vulnerability in the WebExtensions component of Firefox for Android . A remote attacker with user interaction could potentially access sensitive data , resulting in a low confidentiality impact . The CNA-assigned CVSS v3.1 score is 4.3 (Medium) (AV:N/AC...
CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
EUVD-2026-69076
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component
Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84117
CVE-2026-84117 is a privilege escalation vulnerability in Firefox for Android , allowing an attacker to gain elevated privileges beyond those normally granted to the browser. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack r...